Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/520d40e1-187e-3b88-be63-5a90d8c531f9.roa
File: 520d40e1-187e-3b88-be63-5a90d8c531f9.roa (raw, json)
Hash identifier: Um9IGFtchASuNIYDr9Db418XZihjDCW2vZopI/aDE5c=
Subject key identifier: 52:8F:E8:65:33:21:34:77:22:B7:8F:5F:1B:B6:31:0E:BA:62:7A:A3
Certificate issuer: /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial: 010D0C9F43285848037B32F436F27C67AC01C180
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/520d40e1-187e-3b88-be63-5a90d8c531f9.roa
Signing time: Wed 27 Nov 2024 02:00:39 +0000
ROA not before: Wed 27 Nov 2024 02:00:39 +0000
ROA not after: Tue 25 Feb 2025 02:00:39 +0000
asID: 20115
IP address blocks: 66.189.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:03:7b:32:f4:36:f2:7c:67:ac:01:c1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
Validity
Not Before: Nov 27 02:00:39 2024 GMT
Not After : Feb 25 02:00:39 2025 GMT
Subject: CN=71bfc797-a9c8-4555-9488-6b5103cacfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6c:8e:08:bf:e7:77:78:c2:ed:12:a3:06:b1:
77:55:34:60:aa:f6:74:63:ec:a5:a2:e4:2e:a5:c7:
79:db:51:04:21:9d:67:51:0b:42:89:44:81:3e:0d:
67:67:62:8a:49:13:ab:6f:27:40:fd:50:b8:70:d5:
36:42:d2:ba:5c:94:27:ea:d5:01:b9:d2:bc:31:dc:
3b:30:e4:5c:d3:ea:3f:51:0b:9b:5b:c8:dc:65:cf:
17:2a:f0:24:6a:c5:7b:04:df:b0:70:07:da:ef:37:
03:ea:23:e3:9d:74:eb:28:6e:44:bc:06:ae:eb:d5:
73:01:1d:ee:4f:76:64:a2:1a:b3:3d:4c:8f:3c:97:
74:97:de:9a:92:77:da:80:d3:9d:d1:15:a0:a9:8b:
df:89:a8:62:de:a1:22:8b:ca:8f:4b:e4:6d:b5:a6:
01:56:a0:49:8d:eb:13:40:ea:61:9d:ab:c6:7a:0c:
fe:40:ab:e9:c4:ff:4e:57:7d:ef:6b:96:a8:f3:bb:
fe:ff:7b:b9:01:71:eb:de:6d:bf:44:54:12:ad:5f:
65:24:5e:b8:08:58:58:7a:e0:f2:67:76:df:d5:62:
53:e5:10:fc:83:72:49:6f:59:8e:11:e0:a1:a0:ec:
11:3d:61:d7:07:10:75:cd:55:3f:b3:56:dc:0a:c2:
93:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8F:E8:65:33:21:34:77:22:B7:8F:5F:1B:B6:31:0E:BA:62:7A:A3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/520d40e1-187e-3b88-be63-5a90d8c531f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
X509v3 Authority Key Identifier:
keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
sbgp-ipAddrBlock: critical
IPv4:
66.189.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:f5:27:a3:ec:ba:6c:ea:86:8c:65:fe:2d:f4:28:df:02:87:
4e:89:8a:c1:7b:2c:5d:65:f0:e8:0e:69:11:a3:be:19:33:32:
ab:25:1e:0b:4f:6c:d3:36:23:6e:2d:93:34:55:93:f2:c2:77:
14:62:1a:9e:14:a7:76:83:e2:b3:68:09:cc:ee:f0:50:8c:b2:
0a:0e:31:5c:88:c1:25:20:08:69:42:2a:f3:38:6c:6b:0e:bf:
7f:0d:ee:5a:cf:d7:6b:12:20:40:1f:e8:98:cf:5d:21:f8:20:
01:8e:83:df:27:50:14:ba:e1:9b:2b:e7:d3:ee:d4:0e:ae:2b:
16:0b:6c:e4:fa:69:bf:f7:99:3a:07:4c:41:73:8e:0f:8a:41:
5c:1e:eb:4f:30:29:41:69:7c:b6:1a:3c:f8:5e:02:e5:cb:1b:
7c:36:8f:9f:6b:2c:e0:f1:7e:5a:b3:a0:59:dc:57:a7:fd:a4:
78:d1:24:40:9f:fb:a8:59:8f:c8:96:0c:ad:57:2d:58:17:dc:
f3:77:45:01:54:be:37:75:ae:ff:7e:3d:32:aa:7c:1c:17:30:
b4:7d:dc:d3:11:64:30:53:89:9b:f3:bd:1b:c6:b1:58:b0:a2:
a1:5d:c7:88:8f:d2:5a:94:44:a9:a7:19:01:81:14:75:73:d4:
a0:80:70:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgDezL0NvJ8Z6wBwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI0MTEyNzAyMDAzOVoXDTI1MDIyNTAyMDAzOVowLzEtMCsGA1UEAxMk
NzFiZmM3OTctYTljOC00NTU1LTk0ODgtNmI1MTAzY2FjZmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGyOCL/nd3jC7RKjBrF3VTRgqvZ0Y+ylouQu
pcd521EEIZ1nUQtCiUSBPg1nZ2KKSROrbydA/VC4cNU2QtK6XJQn6tUBudK8Mdw7
MORc0+o/UQubW8jcZc8XKvAkasV7BN+wcAfa7zcD6iPjnXTrKG5EvAau69VzAR3u
T3ZkohqzPUyPPJd0l96aknfagNOd0RWgqYvfiahi3qEii8qPS+RttaYBVqBJjesT
QOphnavGegz+QKvpxP9OV33va5ao87v+/3u5AXHr3m2/RFQSrV9lJF64CFhYeuDy
Z3bf1WJT5RD8g3JJb1mOEeChoOwRPWHXBxB1zVU/s1bcCsKTVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFKP6GUzITR3IrePXxu2MQ66YnqjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNTIwZDQwZTEtMTg3ZS0z
Yjg4LWJlNjMtNWE5MGQ4YzUzMWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQr30MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAb1J6Psumzqhoxl/i30KN8Ch06JisF7LF1l8OgOaRGjvhkzMqslHgtP
bNM2I24tkzRVk/LCdxRiGp4Up3aD4rNoCczu8FCMsgoOMVyIwSUgCGlCKvM4bGsO
v38N7lrP12sSIEAf6JjPXSH4IAGOg98nUBS64Zsr59Pu1A6uKxYLbOT6ab/3mToH
TEFzjg+KQVwe608wKUFpfLYaPPheAuXLG3w2j59rLODxflqzoFncV6f9pHjRJECf
+6hZj8iWDK1XLVgX3PN3RQFUvjd1rv9+PTKqfBwXMLR93NMRZDBTiZvzvRvGsViw
oqFdx4iP0lqURKmnGQGBFHVz1KCAcIQ=
-----END CERTIFICATE-----
Generated at Fri Apr 25 23:41:33 2025 by rpki-client